Water School” is a commercial brand under which AGBAR SLU offers training, consulting and dissemination services in the water and environmental sector.

In compliance with the provisions of Regulation (EU) 2016/679 of 27 April on data protection and Organic Law 3/2018 of 5 December on the protection of personal data and guarantee of digital rights, we provide you with the following information regarding the processing of your personal data obtained or collected through this website.

1. Who is responsible for the treatment?

The processing of personal data collected through the website www.laescueladelagua.com will be the responsibility of AGBAR, SLU (hereinafter, "AGBAR"), with NIF B-63152664 and registered office at Calle Santa Leonor 39, 28037 Madrid.

2. For what purpose and legitimizing basis will your personal data be processed? During how much time?

Simply visiting the website and browsing its different sections does not require you to provide us with any personal data or to register as a user. However, we remind you that cookies may be installed on your access device in accordance with the provisions of our cookies policy. You can obtain more details about the cookies we use, the configuration of your consent and how you can deactivate them in our cookies policy.

If you request information or ask us to send you our newsletter, or if you request information about any of our courses, we will ask you to provide us with your identity and contact details (mobile and email) so that we can contact you to provide you with the information you have requested.

In case you decide to take any of the courses we offer, you will be asked for identity data (name and surname, ID card or passport) and contact information (address, email, telephone, etc.), financial data (bank account, in case you personally assume the payment of the course), education and profession data (curriculum vitae, academic record), letter of recommendation (optional) and, if applicable, a photograph.

During the courses, we will ask you for additional data on different occasions, informing you at all times of what we will use them for (organization of visits and trips, attendance at conferences, etc.).

The processing of personal data collected by completing the various forms is based on (i) consent (art. 6.1.a of the GDPR) or, where applicable, (ii) that the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation at the request of the data subject of pre-contractual measures in the event that you request registration for one of the courses (art. 6.1.b of the GDPR).

During the course we may send you by any means, including the email you have provided, information related to the course in which you participate. related events, changes in activity schedules and news in programming or related to the study plan. These messages are necessary for the correct execution of the contracted service.

In the event that you complete any of the surveys made available to you on the website to collect your perception or satisfaction about the courses, the website or collaborative spaces of the Water School or the Water Campus, your data will be processed based on the legitimate interest of the person responsible in knowing your opinion to improve our services or our collaboration spaces.

We will process your data in order to periodically send you, even by electronic means, information about new training programs and activities if you have expressly consented. Remember that you can revoke your consent at any time by any of the means indicated in the What are your rights? section.

Personal data will be kept for the time necessary to fulfill the purpose for which it was collected. Subsequently, they will be kept blocked for an additional period to be able to respond to possible legal liabilities. After this period, personal data will be permanently deleted.

3. What security measures have been implemented to protect personal data?

AGBAR will treat personal data in an absolutely confidential manner. Likewise, it has applied appropriate technical and organizational measures to guarantee its security and prevent its destruction, loss, illicit access or illicit alteration. When determining these measures, criteria such as the scope, context and purposes of the treatment, the state of the art and the existing risks have been taken into account.

4. Who do we share your data with?

The different AGBAR departments involved in processing your request can access your personal data to manage it correctly.
Additionally, AGBAR uses service providers for some tasks. These service providers, who act as processors of AGBAR, may change over time. In any case, AGBAR guarantees through the signing of agreements (among other means) that they comply with appropriate security measures and that they follow their instructions in the processing of the personal data to which they access.

For service efficiency, some of our suppliers are located in countries outside the European Economic Area (EEA) or, being located in the EEA, they share information with other entities located outside said territory. AGBAR guarantees that:

• The transfers are made to countries for which the European Commission has declared that they provide a level of protection comparable to the European level.
• In the absence of such declaration of adequacy, the standard contractual clauses approved by the Commission have been signed.

You can consult this information on the page of the AEPD.
For more information on this matter, you can contact the AGBAR data protection officer at dpo.es@agbar.es.

5. Who do we communicate your data to?

AGBAR may communicate your personal data to third parties when you expressly consent, when it is necessary for the correct execution of the requested service or when required by legal provision.
When your consent is necessary to communicate your personal data to third parties, in the data collection forms we will inform you of the purpose of the processing, the data to be communicated and the identity or sectors of activity of the possible assignees of your personal data.
If the course in which you are participating is organized with another institution, your data will be sent to that institution for the correct management of the course. If you are doing an internship, we will be able to provide your data to the companies where you will do it.
And, where appropriate, to the Ministry of Education. In compliance with current regulations, where appropriate, we will communicate your data to the Ministry of Education and various public administrations.
AGBAR could also be obliged to communicate your personal data when it is imposed by a legal provision or in the event that it is required by the public Administration or by the State security forces and bodies.

6. What are your rights?

You have the following data protection rights:

• Right of access: this consists of consulting what personal data we have about you.
• Right of rectification: this consists of modifying the personal data we have when it is inaccurate or incomplete.
• Right of opposition: this consists of requesting that we do not process personal data for certain specific purposes.
• Right of erasure: this consists of requesting that we delete the personal data.
• Right of limitation: this consists of requesting that we limit the processing of personal data in certain circumstances.
• Right of portability: this consists of requesting that we deliver to you in a computer format the information we have about you or that we transmit it to another data controller.
• Right to file a claim with the competent authority: consists of filing a claim with the Spanish Data Protection Agency (www.aepd.es).

You can exercise your rights by contacting the AGBAR Data Protection Officer by email at the address dpo.es@agbar.es or by sending a letter to Paseo de la Zona Franca 48, 08038, Barcelona with the reference “Data Protection”.

Remember that you can withdraw your consent at any time using these same contact methods. This will not affect the legality of the processing carried out until its withdrawal.

The applicant must be sufficiently identified in the application, which must be signed. If the request is made by a third party, the representation granted for this must be timely accredited. When the data controller has reasonable doubts regarding the identity of the natural person making the request, they may request that the additional information necessary to confirm their identity be provided.

7. Social networks

As a general rule, AGBAR's corporate profiles on social networks (Twitter, YouTube, LinkedIn, Instagram, etc.) are purely informative in nature. If you provide us with data through private messages on social networks due to a query or request made through that medium, the personal data provided will be used exclusively to respond to the request made, in the terms set forth in this policy. We remind you that you should not include your personal data or that of third parties (such as emails, name, telephone number or contract number) through messages opened on any social network. If you are not sure whether third parties can read your message, we advise you to contact us through another channel.

8. Linked Sites

On the website laescueladelagua.com You can find different links to platforms and pages managed by third parties for which AGBAR has no responsibility. These pages have, where appropriate, their own privacy policy detailing the entity responsible for processing the data and its purposes.

9. Update of this policy

AGBAR may revise this policy at any time. Remember to review it from time to time. In the event that the modifications entail a substantial change in the processing of your data or your consent is required for any new processing, you will be informed about these changes in order to obtain your consent again in those cases where it is necessary.

Privacy policy revised on January 10, 2023.